VULHUB ™

GetAccess allows administration of individual user access rights and customer profiles on high-volume 'portal' websites. A flaw exists in GetAccess' execution of java class files. When reading in filenames, input is not validated and directory traversals can be used to execute java class files anywhere on the filesystem.

GetAccess allows administration of individual user access rights and customer profiles on high-volume 'portal' websites. A flaw exists in GetAccess' execution of java class files. When reading in filenames, input is not validated and directory traversals can be used to execute java class files anywhere on the filesystem.